Bitcoin Wallet Linked to Nancy Guthrie Ransom Note Shows Activity

A Bitcoin wallet referenced in the alleged ransom demand for Nancy Guthrie has recorded new activity, according to reports from TMZ and Fox News.

The update comes as law enforcement agencies expand their efforts to locate the missing 84-year-old near Tucson, Arizona.

Nancy Guthrie was reported missing on the night of January 31. Investigators believe she was abducted from her home in the Tucson area. Since then, the Pima County Sheriff’s Department has led a coordinated investigation, with support from the FBI and specialized SWAT units.

As the search continues, attention has increasingly shifted toward the financial trail tied to the case.

Key Points

• Nancy Guthrie, 84, was reported missing on January 31 in Tucson, Arizona. 
• A ransom note demanded $6 million in Bitcoin for her release. 
• TMZ founder Harvey Levin reported new activity on the referenced Bitcoin wallet.
•  KGUN9 confirmed the recorded transaction was less than $300. 
• The Pima County Sheriff’s Department is leading the investigation with FBI support.

Ransom Demand and Crypto Trail

Shortly after Guthrie’s disappearance, several media organizations, including TMZ and KGUN9, received a message demanding payment for her release. The note called for $6 million in Bitcoin.

In response, Guthrie’s children — TODAY show anchor Savannah Guthrie and her siblings, Annie and Camron — signaled their willingness to comply to secure their mother’s safe return. Consequently, the spotlight turned firmly to the cryptocurrency address included in the demand.

That scrutiny deepened when TMZ founder Harvey Levin stated that the Bitcoin wallet showed recent activity. Soon after, Fox News correspondent Bill Melugin shared the update on X, attributing the information to Levin. The reported movement occurred within minutes of the disclosure.

Despite this development, key details remain unclear. It is unknown whether funds were withdrawn or transferred between accounts. However, KGUN9 later confirmed on X that the transaction involved less than $300. Although modest in size, the activity has added a new dimension to the investigation.

NEW INFO: KGUN 9 can confirm there is activity in the bitcoin account listed in the ransom email.

The activity is less than $300.

— KGUN 9 (@kgun9) February 11, 2026

Expanding Law Enforcement Presence

The reported wallet movement coincided with a heightened police response in the Tucson area. The Pima County Sheriff’s Department mobilized SWAT teams and additional officers as part of the ongoing probe.

Authorities have not publicly explained the reason for the deployment. However, scanner reports indicate that a large-scale search operation is underway. This intensified activity has fueled speculation about potential developments behind the scenes.

Additionally, TMZ reported that investigators are examining whether the ransom note originated locally. Sources cited by the outlet indicated that specific elements of the message may point to someone based in Tucson.

Officials are working under a preliminary theory that the individual who sent the note could also be responsible for the alleged kidnapping. However, that connection has not been formally established.

FBI Releases Footage of Masked Individual

Earlier in the investigation, the FBI released images and video of a person seen near Guthrie’s driveway on the night she disappeared. The individual was wearing gloves and a ski mask. Authorities have not identified the person shown in the footage.

Although no suspects have been officially named, public discussion has included Tommaso Cioni, Guthrie’s son-in-law. According to reports, he was the last person known to have seen her that evening, after dropping her off at home following dinner with his wife, Annie Guthrie.

In addition, federal agents and other officers were reportedly observed in Annie Guthrie’s neighborhood. Officials have not clarified the purpose of that presence.

For now, as the investigation unfolds, authorities continue to withhold key details. No arrests have been announced, and the case remains active.